Explicitly set the GitHub Actions thumbprint to resolve opensearch-pr…

…oject#2343. Updated the AWS CDK as well. (opensearch-project#2345) Signed-off-by: David Venable <[email protected]>
mahesh724 · Mar 3, 2023 · 9efac91 · 9efac91
1 parent 32a1d75
commit 9efac91
Show file tree

Hide file tree

Showing 3 changed files with 2,267 additions and 1,704 deletions.
diff --git a/release/staging-resources-cdk/lib/GitHubAccessStack.ts b/release/staging-resources-cdk/lib/GitHubAccessStack.ts
@@ -19,6 +19,9 @@ export class GitHubAccessStack extends Stack {
 
     this.gitHubOidcProvider = new OpenIdConnectProvider(this, 'GitHubOidcProvider', {
       url: 'https://token.actions.githubusercontent.com',
+      thumbprints: [
+        '6938fd4d98bab03faadb97b34396831e3780aea1'
+      ],
       clientIds: ['sts.amazonaws.com']
     });
   }